Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3de088e7-8a5d-3351-9aa7-60417e18fde0.roa
File:                     3de088e7-8a5d-3351-9aa7-60417e18fde0.roa (raw, json)
Hash identifier:          mBW9ZnSjAXdHnjnN7wQswy61X85QZ+wf/A2pGydyk9o=
Subject key identifier:   DA:87:07:AC:51:7A:4E:97:0C:9F:EC:D4:DA:40:B2:44:EC:B9:05:EF
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584D6AAA87A04587189A33AE4750
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3de088e7-8a5d-3351-9aa7-60417e18fde0.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     20473
IP address blocks:        131.226.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:87:a0:45:87:18:9a:33:ae:47:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=4c3d1e9f-78d8-4de1-8934-8915d0a917bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5d:b8:14:39:a8:ad:cc:11:36:4f:ce:ff:e5:
                    ce:cd:b8:17:5c:1e:2f:38:6a:50:8b:15:bc:cf:c0:
                    65:6d:ae:7d:6e:cc:3c:53:05:d4:7c:99:5f:51:aa:
                    ea:8a:34:c2:9c:d3:f4:92:96:e9:d8:19:76:29:83:
                    05:9f:e1:d7:05:a6:1d:f3:0d:56:a0:93:b4:ca:4a:
                    5d:f5:52:71:24:f6:24:01:0d:64:72:99:38:29:8d:
                    a4:fd:7b:e6:1e:b7:4e:e1:85:86:95:e7:8c:cd:f3:
                    3d:99:6a:6f:57:de:63:8d:52:35:d8:07:35:1c:20:
                    f3:41:5b:11:4d:44:62:03:8a:eb:cf:47:12:31:a7:
                    09:24:69:c0:97:6b:dc:f2:aa:b3:3c:59:3b:b7:1d:
                    d5:5c:74:d7:11:49:90:63:24:87:8d:ab:8f:8a:a5:
                    e6:b7:e5:75:f8:eb:64:4f:47:d1:8d:56:b4:aa:05:
                    d8:22:00:4e:c0:0c:9b:1e:6f:a0:b7:ae:41:6f:a8:
                    b1:a1:5a:3d:75:32:d4:22:1b:17:56:49:51:43:32:
                    48:f3:c9:23:b2:fc:c8:2d:cd:cc:bc:a0:5c:e8:14:
                    71:d3:57:73:92:52:39:8d:31:2c:3e:2f:24:e6:15:
                    f4:d4:09:0a:07:41:39:d5:1d:5b:c9:bc:a5:be:a1:
                    f5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:87:07:AC:51:7A:4E:97:0C:9F:EC:D4:DA:40:B2:44:EC:B9:05:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3de088e7-8a5d-3351-9aa7-60417e18fde0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:9f:50:4b:1c:cf:c7:5f:1d:81:24:3c:34:b3:9b:1a:61:4a:
         00:37:fc:35:d3:87:b5:69:81:30:27:de:34:7a:33:89:5e:4a:
         7a:6c:8e:53:de:82:ad:b7:71:f0:12:cb:d3:d0:b3:32:79:d6:
         2a:59:85:b4:8c:bf:74:66:d8:d6:7f:ba:c3:4c:a8:60:8b:9a:
         e7:45:0a:d3:2c:23:e4:3d:88:88:9d:da:d4:bd:54:85:fd:f8:
         a3:4e:a9:f6:69:33:31:d5:4f:ef:80:11:19:59:16:6e:f5:ab:
         f0:10:28:df:64:aa:83:eb:9e:af:5d:9a:1a:07:6b:d9:f3:8c:
         59:05:54:0a:cd:e1:3f:a9:4a:03:c0:8f:bf:e2:7a:96:e3:e9:
         74:10:d6:39:c0:51:fd:f6:ee:81:75:b9:da:0f:d3:b4:fc:61:
         57:ad:fb:a5:f0:47:ed:25:df:39:73:03:89:3f:74:8e:0d:a9:
         aa:34:72:07:b0:c0:14:1e:6e:ed:0d:7e:29:8e:a1:f2:d9:e1:
         9b:83:f3:4e:17:a9:3b:5a:bc:d0:c1:16:54:99:69:e3:a3:1f:
         e2:ce:64:05:60:9c:b9:54:af:20:bc:ee:46:b6:16:07:e4:45:
         30:8c:45:56:60:b1:f9:ab:3a:31:8e:77:9d:93:fe:54:7c:dc:
         a4:f2:d6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:42:03 2026 by rpki-client